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This overview summarizes the major functions performed by the 
yjjj-j^TM -pQ Ethernet Expansion Board hardware. The topics covered 
here include : 

o Interface I/O description 

o Status and command circuitry 

o State machine control circuitry 

o LANCE interface 

o Ethernet interface 

o Software interface 

Ethernet Expansion Board 

The Ethernet Expansion Board (EEB) , when plugged into an AT&T 
UNIX "^ PC, provides an interface to an Ethernet communications 
network operating at a transfer rate of lOMB/sec. The EEB is 
based on the AMD 7990 and 7992 chip set, which performs the 
following functions: 

o AM7990 Local Area Network Controller for Ethernet (LANCE) 

performs memory management, packet handling, error reporting, 
and interface functions. 

o AM7992 Serial Interface Adapter (SI A) performs Manchester 
encoding and decoding of the serial bit stream with phase 
lock loop, clock recovery. 

The Expansion Board, as shown in the Figure 1 block diagram, is a 
circuit board containing the I/O and DMA interface to the LANCE 
chip, a state machine with a read/write control register, a 
separate DMA controller for LANCE status, and a board ID/Ethernet 
address ROM . 
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Figure 1 Expansion Board Block Diagram 
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Once the LANCE chip is initialized, all data transfers including 
buffer chaining are handled by the chip. Timing and control are 
maintained by the on-board state machine . LANCE status is 
transferred to memory by a separate state machine DMA controller 
on each LANCE interrupt. This status is placed in a 255-word 
ring in memory allowing the software a 2 55 -packet interrupt 
latency. Because of maximum throughput, the CPU is able to find 
all data and status in memory and never needs to talk directly to 
the boards The board is also not re''^JLired to wait for CPU 
response or to share board resources with the CPU accesses . 

LANCE operation consists of two distinct modes, transmit and 
receive. In the transmit mode, the LANCE chip directly accesses 
data in memory. Data is conditioned by adding a preamble, sync 
pattern, and appending a 32 -bit cycle redundancy check (CRC) . 

This packet is sent from the LANCE to the AM7992A Serial 
Interface Adapter (SI A) . The SIA then transmits this packet to 
the Ethernet system AM7995 transceiver. In the receive mode, 
packets are sent by the SIA to the LANCE. 



Ethernet Interface 

The Ethernet system, to which the EEB is connected, consists of 
an external AM7995 transceiver with power supply and the Ethernet 
coax transmission line. The EEB is connected to this system by 
cable. For a detailed description of the Ethernet system 
interface, refer to the Ethernet/IEEE 802 . 3 specification and 
the technical manual for Local Area Network: Controller AM 7990 
(LANCE) by Advanced Micro Devices . 

Interface I/O Description 

The expansion-board interface consists of drivers and receivers 
for all required signals to and from the UNIX PC's expansion bus. 
The expansion data bus goes through buffers that are controlled 
by the state machine section to create the internal data bus . 

The address bus and the bus cycle control signals are received 
with buffers that are always enabled to create the internal 
address and control bus. The internal address and control bus, 
with the comparator for board ID, allows constant monitoring for 
board I ^O re'^uests which are then i^assed on to the state 
machine . 

For board- initiated DMA cycles, the state machine -generated 
request, read/write, and data strobe signals are also driven onto 
the expansion bus by this section. 
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Status and Com martei C ircuitry 

The amount of on-board status and command information is limited. 
The board ID function has been expanded to allow the CPU to 
interrogate the board for the 6 -byte Ethernet address, as well as 
for the required 4-byte board ID. This information is contained 
in a 3 2 -byte prom accessed at odd byte addresses in the upper 32 
bytes of the board address block. A write to any of these 
addresses produces a board reset . 

CPU Read/Write Access 

The status and command section provides CPU read/write access to 
the LANCE chip address and data ports. However, due to the long 
access time of the chip, LANCE reads do not provide data to the 
CPU in a single cycle. Data is latched on board during the LANCE 
read; it is then read by the CPU in a separate latch read cycle. 

LANCE Interrupt Status 

This section contains a 16-bit register and an 8-bit counter. 
The LANCE interrupt status is written automatically to memory at 
the location of the combined 24-bit address by the on-board DMA. 

Read/Write Control Register 

A 4-bit read/write control register is also contained in this 
section. This register allows the CPU to disable DMA for 
diagnostic purposes, select Ethernet, and make selections between 
INT 01 and INT 05. The register contains one unused bit. 



State Machine C ontrol Circuitry 

The state machine control section consists of five PALs providing 
control and timing signals for all other sections. A 20R8 PAL 
determines when a board cycle needs to be initiated and what type 
of cycle it should be. The 2 ORB arbitrates between LANCE DMA 
requests (HOLD) , LANCE interrupts, and CPU I/O requests and 
generates the LANCE HLDA and expansion bus requests as well as on- 
board I/O cycles. 
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Each, of 11 non-idle cycles has its own timing and control 
requirements (see timing diagrams for more detail) . These cycles 

COnSILSo ^w-' JL j_-i-v^ K^r \^ j_iia. o-Ld <^c^»^ <w»^d d u j_<^li£> WiiJ_iL^ii cll t5 ; 

o CPU non- LANCE Read 

o CPU non -LANCE Write 

o CPU LANCE Read 

o CPU LANCE Write 

o CPU Data Latch Read 

These are all individual cycles that can occur only when the 
state machine is in its idle state. The state machine is always 
returned to the idle state . 

Three additional cycles are initiated by LANCE DMA requests . 

j.A.XK^o<^ arcs . 

o request cycle 

o LANCE DMA read cycle 

o LANCE DMA write cycle 

The request cycle precedes a single LANCE DMA cycle or burst of 
cycles. This cycle insures UNIX PC LANCE synchronization. The 
LANCE DMA read or write cycles follow the request cycle. The 
state machine goes directly from the request cycle to the read or 
write without going through idle . As long as the LANCE DMA 
request stays active, each DMA cycle leads directly to the next, 
again without idle. LANCE DMA requests are either single cycle 
for buffer management fetches or bursts of eight cycles for data 
transfers . 

The three final cycle types are also linked together with no 
intervening idle states . When the LANCE asserts its interrupt 
the state machine executes a status LANCE read cycle reading the 
LANCE interrupt status into the on-board data latch. A status 
DMA cycle is executed to place the status in the status ring in 
memory. Finally, a status LANCE write is executed to clear the 
LANCE interrupt, and a CPU interrupt is generated at the same 
time . 
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The 20R8 PAL encodes the cycle type in 4 bits. These 4 bits are 
fed to three additional registered PALS . These signals combine 
with a 3 -bit counter for timing within each cycle and, with 
several handshake signals from the LANCE, allowing these three 
PALS to generate all LANCE-related timing and control signals. 

In addition, an I/O cycle signal is generated for on-board non- 
LANCE cycles. This signal goes to the fifth PAL. This PAL is a 
nonregistered PAL that generates timing and control for on-board 
I/O that is based on I/O cycle and address decodes. 



T.ANCE Interface 

The LANCE interface consists of a 16 -bit, multiplexed address and 
data bus with associated handshake signals . The hardware 
provides three sets of 15 -bit latches for address, read data, and 
write data. This section also includes a buffer for the upper 5 
bits of address and a 4-bit data buffer. These buffers provide 
for the status write to clear the LANCE interrupt . 

Ethernet Interface 

The Ethernet interface is handled by the AMD chip set. The LANCE 
chip sends transmit data to the 7992 and gets receive data and 
collision detection from the 7992. The 7992 provides the 
interface to the off -board transceiver through a standard 15 -pin 
D-connector interface. Table 1 lists the pin-out assignments for 
this connector . 



Table 1 



Ethernet 15-Pin D Connector 



Pin 


Signal 


Pin 


Signal 


Pin 


Signal 


1 


GND 


6 


GND 


11 


Not Used 


2 


COL + 


7 


Not Used 


i 12 


RCVR- 


3 


TRANS + 


8 


Not Used 


i 13 


PLUS12 


4 


Not Used 


9 


COL- 


14 


Not Used 


5 


RCVR+ 


10 


TEIANS- 


15 


Not Used 



Softwar e Interface 

The EEB occupies the standard 256Kbyte (or 128K word) block 
assigned to each expansion slot. 
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Expansion Slot 

The expansion cards in the UNIX PC are each assigned 256K bytes 
of address space. Since all addressing is done on word 
boundaries, 128K words of address space is available. Expansion 
bus address bits XAl - XA17 define this space. Each expansion 

seven unique slot addresses. Bits XA18 - XA20 are compared 
against the slot identification bits to validate the address. 
Also, address bit XA21 is always zero; similarly, expansion 
addresses XA22 and XA23 are always ones. 



Therefore, once the EEB is plugged into its slot, the 
predetermined XA18 - XA2 3 bits generate the offset address, while 



-1-^ VAT 



devices 
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The offset addresses used in the UNIX PC are listed below 



Table 2 Expansion Slot Offset Addresses 



Slot Number 


Offset Address 


(h) 





ocooooo 




1 


0C40000 




2 


0C80000 




3 


occoooo 




4 


ODOOOOO 




5 


0D40000 




6 


0D80000 




7 


ODCOOOO 





On- Board Addressing 

Only a small number of addresses are decoded for on-board 
functions. These addresses are not fully decoded in hardware. 
Undefined addresses should not be used; they may affect on-board 
functions. Reads and writes are always full words, even if only 
8-bit values are significant. 



Interface Registers and CmnTnpind Descriptions 



The following paragraphs list the registers used in Ethernet 
interface operations and the command descriptions that select the 
I/O functions. 
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ID Register (Base Address 03FFFF - 03FFC0) 

When the UNIX PC is first powered up, the UNIX kernel reads the 
ID register into memory. The ID register is a set of 8-bit 
registers located at odd byte addresses in the upper 32 words of 
the board address block. The upper four words contain the 
required board identification numbers. The lowest six words 
contain the board- specific Ethernet station address. The 
appropriate driver must determine where the hardware is located. 
The getslot system call (see UNIX System V User ' s Manual . 
drivers (7) ) locates the offset (slot) . The base address is then 
added to the offset address to access the appropriate registers. 



Base Address 



R/W 



3FFFF 


R 


03FFFE 


R 


03FFFD 


R 


3FFFC 


R 


03FFFB 


R 


3FFFA 


R 




through 


03FFCD 




03FFCC 


R 


03FFCA 


R 


3FFC9 


R 


3FFC8 


R 


03FFC7 


R 


03FFC6 


R 


03FFC5 


R 


3FFC4 


R 


03FFC3 


R 


03FFC2 


R 


3FFC1 


R 


03FFC0 


R 



Description 

MSB of ID, two's complement 

Not Used 

LSB of ID less than two's 

complement 

Not Used 

MSB of ID 



Not Used 

MSB Ethernet Address 

Not Used 

Ethernet Address 

Not Used 

Ethernet Address 

Not Used 

Ethernet Address 

Not Used 

Ethernet Address 

Not Used 

LSB Ethernet Address 

Not Used 



Software Reset 

A write to any of the four board ID addresses causes the board to 
be reset and put into an inactive state . 



Base Address 

03FFFF 
03FFF8 



R/W 

W 

through 

W 



Description 

Software Reset 
Software Reset 



8 
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LANCE Data Latch 

Tliis i:"ead.-onl"v^, 16-bit latch is re<TTjLired. to acco!!iniod.ate the slow 
LANCE register access time to the expansion-board timing 
requirements through a two-step process. Reading the on-chip 
LANCE registers does not produce valid data in time for the 
active I/O cycle, but the data is stored in the LANCE data latch. 
Subsequently, a read of the latch will return the desired data to 
the CPU. 



Base Address R/W 



000006 



R 



Description 

LANCE Data Latch 



Status Ring Address 

This write-only, 16-bit register is used to supply bits A9 to A21 
of the status ring address. Bits A.1 to A-8 are sup^^lied b"^^ an on- 
board counter which is cleared on reset. Together, they supply 
the addressing for the on-board DMA to place LANCE status in 
memory automatically. A write to this address clears any pending 
interrupts . 



Base Address R/W 



Description 



000006 



W 



Status Ring Address 



Control Register 

The board contains a read/write, 4-bit control register to 
provide selection of interrupt line, LAN interface type, and a 
DMA disable for diagnostic purposes . This register is reset to 
zeros by hardware or software reset. 



Bit 



DO 



Signal 

DMAEN 



Descr ipt i on 

1 = DMA Enabled 
= DMA Disabled 



Dl 



RESERVED 



1 = Other Selected 

= Ethernet Selected 



D2 



INTSEL 



1 = Use Interrupt 01 
= Use Interrupt 05 



D3 



SPARE 



Etiiemet Expansion Board Theory of Operation 



A read of this address also resets the board interrupt. 

Base Address R/W Description 

000004 RW Control Register 

LANCE Register Address and Data Ports 

The LANCE chip in slave mode contains two ports . The register 
address port is a 2 -bit port that selects which of the four 16 -bit 
control and status ports are accessed through the register data 
port . 

Base Address R/W Description 

000002 RW LANCE Register Address Port 

000000 RW LANCE Register Data Port 

Software Operation 

Once the LANCE chip has been started, all data and status 
transfers are done through DMA. No I/O access is permitted to 
the board except the software reset and interrupt reset 
functions = 
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Troubleshooting 

The following procedures are a simplified description for 
troubleshooting a UNIX PC Ethernet Expansion Board that is not 
functioning properly or has failed a diagnostics test. The 
following items are required to perform these procedures: 

o Kernel debugger program 

o An Oscilloscope 

o Voltmeter (VOM) 

o Logic Analyzer 

The following reference books will also be useful: 

o Ethernet Board Installation and Diagnostics Guide 

o Advanced Micro Devices Local Area Network Controller AM7990 
(LANCE) Technical Manual 

Before beginning with the troubleshooting procedures, check the 
schematic against the ICs on the board so they can be identified 
readily. Also, during operation of the expansion board, the 
voltage at J2-13 should be 12 - 13 Vdc . 

Troubleshooting is concerned with the EEB's three basic cycles 
and how they relate to components that have failed. Figure 2 is 
a diagram of the Ethernet states and Table 3 lists the state 
assignment functions during specific cycles. These cycles are: 

o I/O cycle 
o DMA cycle 
o Interrupt cycle 

T/Q Cycle 

The I/O cycle consists of three individual cycles as follows: 

o Register Read/Write cycle 
o Board ID Read-Only cycle 
o CPU LANCE Read/Write cycle 

When the EEB has been reset either by a hardware or software 
reset, it is at the idle state. By using the Kernel debugger 
program, the I/O cycle can be examined for the three read and 
write functions listed above. A failure of any of these cycles 
indicates the following hardware problems: 
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Table 3 State Assignments 



Cycle 


Function 


3 


2 


X 





IDLE 























1 










1 





STLRD 








1 


1 


STLWR 





1 








CPUREGRD 





1 





1 




u 


1 


1 





CPULRD 





1 


1 


1 


CPULWR 


1 











LDMARD 


1 








1 


LDMAWR 


1 





1 







1 





1 


1 


STDMAWR 


1 


1 








lORDCYC 


1 


1 





1 


lOWRCYC 











1 


RQCYC 


1 


1 


1 


1 





Register Read/Write Cycle 

A failure of this cycle is a result of a malfunctioning PAL or 
wrong PAL equation, a cycle status being misread to the state 
machine, or a clock failure. The following components should be 
checked for the listed conditions: 

o 4B (PAL16L8A located on schematic page 4) is either 
malfunctioning or the wrong equation is being read. 

o 4C (PAL2 0R8A located on schematic page 5) is either 

malfunctioning or the wrong equation is being read. Also, 
use the logic analyzer to check pins 19-22 for the correct 
CYCO* - CYC3* sequence (refer to the cycle diagram. Figure 3) . 

o 4C - 4F (PAL20R8A, PAL16R8A, PAL16R5A, and PAL16R8A located on 
schematic sheet 5) are not receiving clock signals on pin 1 . 
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Board ID Read-Only Cycle 

The following components should be checked for failure: 

o 2F (PROM 74S288 or 823123 located on schematic sheet 4) has 
failed. 

o 4B (PAL15L8A located on schematic sheet 4) has failed. 

o There is no clock present. 

CPU LANCE Read/Write Cycle 

The LANCE location address is being accessed by writing to the 
Register Address Pointer (RAP) . The CPU LANCE Read cycle is 
performed in two steps. First, location 0000 is read; second, 
location 0006 is read-returning the valid data from the address 
pointed to by RAP . 

If the CPU LANCE Read/Write cycle fails, check the following 
components for the listed conditions: 

o 4C (PAL20R8 located on schematic sheet 5) the pin 19 - 22, 
CYCO* - CYC3* is not correct. 

o 4E (PAL15R6A located on schematic sheet 5) is not providing 
the proper signal interface (DAS* and READY*) to the LANCE. 

o 4H (AM 7990 LANCE located on schematic sheet 3) is 
mal functioning . 

DMA Cycle 

The DMA cycle consists of three individual cycles as follows: 

o DMA Read (single or burst) cycle 
o DMA Write (single or burst) cycle 
o STATUS DMA Write (single) cycle 

A failure of any of these cycles indicates the following hardware 
problems as discussed in the following paragraphs. 
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DMA Read/Write (Single) 

On the first two cycles, DMA Read and DMA Write, the address is 
provided by LANCE. For STATUS DMA Write, the address comes from 
the on board registers IG and IE, and ring counters 2B and 2C, 
located on schematic page 4. These are written to during 
initialization . 

The LANCE performs 12 single DMA READ cycles when a 1 is being 
written to the initializing bit of the LANCE control -status 
register. Using a logic analyzer, check 5D, pin 8 (RQ) located 
on schematic page 4, for these 12 requests corresponding to bus 
grant (BG) from IH, pin 16 with lA pin 12 (XR/W*) high. 

A.lso, check the signal timing at LANCE as follows: 

o 4H pin 17 (HOLD*) schematic page 3 

o 4H pin 19 (HLDA*) 

o 4H pin 18 (LAS*) 

o 4H pin 14 (DAS*) 

o 4H pin 22 (READY*) 

Refer to the timing diagram in Figure 3. 

After initialization, LANCE generates the interrupt active low at 
4H pin 11 . The state machine gets the status from the LANCE and 
writes to the status ring. The content is OlCl (see the bit 
definition in the LANCE technical manual) . The state machine 
then generates the interrupt to the CPU at the same time that it 
writes Is to the LANCE, clearing the LANCE interrupt and status. 
If the initialization is complete and correct, the status content 
at the CPU memory will be OlCl. 
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COMPONENT SIGNAL 



(LANCE I 



|4C) 



( LANCE 1 



(LANCE. 



(4Ei 



i4Ci 



iCPUi 



HOLD 



HLDA 



LAS 



DAS 



READY 



RQ 



BG 




500 ns 



XR/W 



Figure 3 Expansion Board Cycle Diagram 



Next, the LANCE perforins a single DMA read to the TMDl every 1.6 
msec. Using the oscilloscope, check the RQ and BG activity. BG 
should have a 500 nsec pulse width. RQ should be gone 10 nsec 
after BG is active. If there is no activity (neither RQ nor BG) 
check if HOLD*, HLDA*, LAS*, DAS*, READY*, and CYCO through CYC3* 
are generated from 4C, located on schematic page 5. 

The cycle should not be stuck at DMA Read longer than 3 us. If 
it is, this indicates that 4C and 4E on schematic page 5 or the 
LANCE is defective. 
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DMA Read/Write (Burst) 

Using a logic analyzer, observe the DMA Read/Write burst. The 
burst should consist of a transfer of 8 words, except for the 
last cycle if data is fewer than 8 words. If the DMA Read/Write 
burst does not perform properly, check 4C and 4E on schematic 
page 5 , or the LANCE . 

Interrupt Cycle 

The interrupt cycle consists of the LANCE sending an interrupt to 
the state machine at the completion of an operation. If there is 
an error, the state machine reads the LANCE status and requests 
that the status DMA Write cycle be performed. Once the state 
machine gets the bus, it writes to the location of the current 
status ring address and updates the status ring address . Then 
the state machine generates the interrupt to the CPU. Note that 
the status ring content normally shows whether the problem is in 
either reception or transmission of data. Check the receive or 
transmit descriptor ring for further status information. 
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Figure 4 CPU non-LANCE Read-Timing Diagram 
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Figure 5 CPU non-LAMCE Write -Timing Diagram 
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Figure 6 CPU LANCE Read-Timing Diagram 
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Figure 7 CPU USNCE Write-Timing Diagram 
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Figure 8 LAl>rCE DMA Read Cycle 
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